Hi there! Welcome to this month’s AlmaLinux newsletter, where we share the latest AlmaLinux happenings, upcoming events, and more. Quick notes - find more information below! - Patches for CVE-2024-6387 (regreSSHion) and CVE-2024-6409 are available for AlmaLinux OS 9 users. - We're testing a patch for glibc - A new version of ELevate will be released next week - testers wanted! - Earlier this month, we announced that CTJ has renewed its platinum sponsorship. We also announced 3 new 2024 sponsors! Latest from the AlmaLinux BlogAnnouncing Silver Sponsor Members - Codenotary, ATIX AG, StorPool Storage AD We just announced 3 Silver Sponsor Members for 2024: Codenotary, ATIX AG, and StorPool Storage AD! We’re so grateful for the contributions of our every-growing list of sponsor members, as more and more companies prove that they believe in what we do. You can read more about our sponsors here https://almalinux.org/blog/2024-07-30-announcing-codenotary-atix-storpool/ ! Testers needed: glibc regression in Enterprise Linux 9.4 Recently, the VFX community was faced with a regression in glibc causing instability for very commonly used software in RHEL 9.4 and distributions based on it. The fix has been available upstream but was only recently released to CentOS Stream 9. We need your help testing the fix before we consider releasing it ourselves. Learn more in this blog post https://almalinux.org/blog/2024-07-25-testing-glibc-needed/! Sponsor webinar: Raise Your Application Management Game: AlmaLinux and Virtuozzo in Action benny joined a webinar with one of our newest Sponsor Members at the Foundation to talk about why and how people use AlmaLinux. Watch the recording here https://www.youtube.com/watch?v=Np3NKUT-aL8! AlmaLinux Cloud, Container, and Live Media Images Updates We have been doing a ton of work to automate our image creation, and have been making some important changes for AlmaLinux 9.4 and 8.10 images. You can find a complete breakdown in this recent blog post https://almalinux.org/blog/2024-07-10-almalinux-container-cloud-live-media-u... . How to get updates after CentOS 7 end-of-life On June 30th CentOS 7 hit end-of-life, ending the long-loved and widely used CentOS Linux era. While the CentOS Project continues on with CentOS Stream, much of the world still needs another option for upgrading CentOS 7. The AlmaLinux community has a few options you can check out in this blog post https://almalinux.org/blog/2024-07-09-centos7-updates/! AlmaLinux OS 9 Patching for CVE-2024-6409 Another recently disclosed vulnerability in OpenSSH https://www.openwall.com/lists/oss-security/2024/07/08/2 in glibc-based Linux systems involves a signal handler race condition, which could expose your system to potential security risks. The OpenSSH patch for CVE-2024-6409 has been released and is available for AlmaLinux OS 9 users. The decision to build the update and push the package to production without waiting for a CentOS Stream or RHEL update was made by our newly-formed technical steering committee, ALESCo https://almalinux.org/blog/2024-05-21-introducing-alesco/. Learn more in this blog post https://almalinux.org/blog/2024-07-09-cve-2024-6409/. Get ready for ELevateNG In January we announced the availability of ELevateNG https://almalinux.org/blog/2024-01-31-elevate-updates/ (Next Generation) for testing. ELevateNG is based on leapp version 0.19.0 https://github.com/oamg/leapp-repository/releases and includes upstream features and bugfixes. Unless we encounter any blockers, the current version of ELevateNG will move to stable the week of August 5th. Check out this blog post https://almalinux.org/blog/2024-07-08-elevateng-testing/ to learn more! Welcoming Cybertrust Japan again as a Platinum Sponsor Member Our friends at Cybertrust Japan Co., Ltd, have renewed their platinum sponsor membership. As a subsidiary of SB Technology Corp, this level of commitment to the foundation is huge, and we cannot thank them enough. Cybertrust Japan’s sizable contributions to AlmaLinux will allow us to expand AlmaLinux OS’s security and adoption in Asia. We’ve also seen a noticeable upswing in the adoption of AlmaLinux in Japan! Learn more in this blog post https://almalinux.org/blog/2024-07-02-ctj-sponsorship/. AlmaLinux OS 9 - CVE-2024-6387: regreSSHion Security is our top priority at AlmaLinux and we aim to deliver patches to our users as quickly as possible. If you aren’t already aware, a vulnerability in OpenSSH https://openwall.com/lists/oss-security/2024/07/01/3 in glibc-based Linux systems that was published on July 1, 2024. We made the decision to make this patch available that same day for AlmaLinux OS 9 users. The decision to build the update and push the package to production on our own (without a CentOS Stream/RHEL update) was made by our newly-formed technical steering committee, ALESCo https://almalinux.org/blog/2024-05-21-introducing-alesco/. We are committed to working upstream and have submitted this patch to CentOS Stream 9 https://gitlab.com/redhat/centos-stream/rpms/openssh/-/merge_requests/77 to benefit the whole ecosystem. You can learn more in this blog post https://almalinux.org/blog/2024-07-01-almalinux-9-cve-2024-6387/. Upcoming Events July was also pretty light on events, though we did attend Academy Open Source Days https://events.linuxfoundation.org/about/calendar/?_sft_lfevent-category=aca... and are currently attending SIGGRAPH https://s2024.siggraph.org/. Here’s what’s coming up for the rest of the year: - Flock to Fedora https://flocktofedora.org/, August 7-10 in Rochester New York, US - NERDEARLA https://nerdear.la/en/, September 24-28, 2024 in Buenos Aires, Argentina - All things open http://allthingsopen.org/, October 27-29 in Raleigh, North Carolina, US - Seagl https://seagl.org/, November 8-9 in Seattle, Washington, US - SC (formerly Supercompute) http://supercomputing.org/, November 17-22 in Atlanta, Georgia, US If you see an event missing that you think we should attend, or if you know of any amazing open source events in Asia, South America, or Africa, let us know! Our community is growing quickly in those areas, and we’d love a chance to connect with them! We’re also looking for volunteers from the AlmaLinux community to help staff our booths. If you like chatting with folks about Linux and open source and are local to any of these events (or any others that you think we should be at) fill out this Google form https://docs.google.com/forms/d/1cQ0YQiAcRZXPnDqiHak-AXmsjEBz-IQE8s8jbPLykds...! We’ll cover your travel and hotel. Stay up to date and join us!If you want to make sure you catch every update from us, sign up for the Newsletters mailing list https://lists.almalinux.org/mailman3/lists/newsletters.lists.almalinux.org/ or subscribe on LinkedIn https://www.linkedin.com/newsletters/almalinux-news-7123058222835376128/! benny Vasquez Chair, Board of Directors @AlmaLinux OS Foundation *I am sending this message now because it suits me, but I don’t expect that you will read, respond to, or act on it outside of comfortable hours for your time zone.*